Which of the following is NOT an access control requirement for a Secured Area?

• A. Authorize
• B. Allow
• C. Deny
• D. Verify

Answer: (D)

The main idea here is how access control decisions for a Secured Area are defined and enforced. An access control policy centers on determining who is allowed to enter and then applying the corresponding action: authorize to determine eligibility, and either allow entry when eligible or deny entry when not. These are the direct policy outcomes that govern access.

Verify is not part of the access control policy itself. Verification, meaning confirming a person’s identity, is a step used to support access control (authentication), but it isn’t the policy directive that determines entry. The policy focuses on who is authorized and the resulting allow or deny decision. Therefore, verification isn’t considered an access control requirement in this context.